1.1.Access the Azure Portal at https://portal.azure.com and log in. Alternatively, go to "Click", then go to the "App Registrations" area; in this case continue with 1.4.

1.2. Click "Entra ID"

1.3. Click "App Registrations" in the navigation menu on the left side

1.4. Via "+New registration", add new registration and name it

1.5.Fill out application registration

1.6.Single tenantselect

1.7.Under "Redirect URI" (optional), select "Public client/native (mobile & desktop)"

1.8.in the "Authentication" area, add the "Platform configuration Mobile and desktop applications" and enter the Redirect URI "https://login.microsoftonline.com/common/oauth2/nativeclient"

1.9.In the area "App-Registration >TiCon  API Permissions" is selected

1.10.by clicking on "+Add a permission" to add a new permission insert

1.11.In the "" window that follows,Microsoft Graph select

1.12.Application permissions select

1.12.Grant the following ""Permission .

▪openid

▪User.Read

▪User.ReadBasic.All

▪User.Read.All

▪Group.Read.All

This allows the Entra ID users and groups to be read out with TiCon4.

The status must be set to "Granted for...", i.e. an authorized user must still approve these rights.

1.13. Click "Register" to complete the registration

1.14.  Then open the new registration, copy the "Application (client) ID" and the "Directory (tenant) ID" as these are required in TiCon4

2.1.Start TiCon

2.2.Open TiCon-Admin

2.3.Under "Program" → "General" insert the " Application (client ID) " and "Directory (tenant) ID" (see above) and save

2.4.A dialog for logging into the Azure Portal appears

2.5.There are two ways to log in:

2.6.Use an Azure user who has administrator authorization for app registrations in Azure and grant permission (consent)

2.7.Use an Azure user who does NOT have administrator authorization for app registrations in Azure. In this case, three variants can occur:

a.Azure is configured so that the user cannot make a "Request" to the administrator.
In this case, registration via Entra ID is not possible.

b.Azure is configured so that the user can make a "Request" for the authorization.
To do this, enter a justification and send a "Request".
After confirmation by the administrator, it is possible to log in to TiCon.
If the waiting time for confirmation is unacceptable, close TiCon and repeat steps 1–5. In this case, option C applies.

c.Permission ("Consent") for the app has already been granted.
In this case, it does not matter which Azure user you use.
TiCon saves the changes and can use the Entra ID from then on